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Abstract. In this paper, we follow the recent work of Helleseth, Kholosha, Johanssen and Ness 
to study the cross correlation between an m-sequence of period 2'" — 1 and the c?-decimation of 
an m-sequence of shorter period 2" — 1 for an even number m = 2n. Assuming that d satisfies 
' d(2' + 1) = 2' (mod 2" — 1) for some I and i, we prove the cross correlation takes exactly either 

three or four values, depending on gcd(/,n) is equal to or larger than 1. The distribution of the 
correlation values is also completely determined. Our result confirms the numerical phenomenon 
Helleseth et al found. It is conjectured that there are no more other cases of d that give at most 
a four-valued cross correlation apart from the ones proved here. 
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!j:t\ 1. Introduction 

O 

Sequences with good correlation properties have important applications in communication 
systems. The maximal period sequences (m-sequences) and their decimations are widely used 
^ ' to design sequence families with low-correlation [31 [H El [TU] . 

. Recently, Ness and Helleseth initiated the studies on the cross correlation between an m- 

sequence {st} of period 2™ — 1 and the d-decimation {udt} of an m-sequence {u*} with shorter 
■ period 2^ — 1 for m = 2n and d with gcd((i, 2" — 1) = 1 [12]. These two period-different sequences 

are exactly the m-sequences used to construct the Kasami sequence family [9l [T0| I17j . They 
' proposed the first family of decimation d that the cross correlation takes three values in |12j . 

^ ■ where n is odd and d is taken as d = ^ . They also completed a full search for all the 

decimation d giving at most a six- valued correlation for m < 26 |12j . Later, they found another 
family oi d = 2~2~ — 1 giving a three- valued cross correlation for odd n [13]. Further, in [7], 
^ ■ Helleseth, Kholosha, and Ness showed for a larger family of d satisfying 



d(2' + l) = 2^(mod2"-l), (1.1) 

the cross correlation is three-valued, where n is odd and gcd(Z,n) = 1. Based on their numerical 
experiment, the authors in [7] conjectured that they had found all d giving a three-valued cross 
correlation. 

For the cross correlation taking four values, Ness and Helleseth |14j proved this is the case 
ii d = \k^l a-iid m = 6k. This result was very recently generalized to the case of d = \k^i 
and m = 2kr with odd r by Helleseth, Kholosha and Johanssen in [6]. As they had pointed 
out, there still existed some examples of four- valued cross correlation that did not fit into all 
the known families they had found. 

In this paper, we follow above work to study the cross correlation of {st} and {udt} with the 
decimation d satisfying Equality (II. ip for a general case of parameters m and /, namely, without 
any restriction on n and /. We prove the cross correlation takes exactly either three or four 
values, depending on gcd(^,n) is equal to or larger than 1. The distribution of the correlation 
values is also completely determined. 
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Our result theoretically confirms the numerical experiments Helleseth et al done in a unified 
way, that is, except some exceptional d in small m = 8 and 10, all d found in the experiments 
and giving at most a four- valued cross correlation are covered by our result. This definitely 
includes new classes of d that can not be explained in previous results, for instance, d = 181 
for m = 20. The full numerical search of up to m = 26 |12j together with our result suggests 
one to conjecture that for m > 10 there are no more other d giving at most a four-valued cross 
correlation apart from the ones satisfying (1.1). 

Our proof is mainly based on the theory of quadratic forms and on the study of a class of 
equations over a finite field, which is a little different from the treatments of Helleseth et al. 

This paper is organized as follows. Section 2 is preliminaries on cross correlation and quadratic 
forms. Section 3 determines the ranks of quadratic polynomials Pa{x) and the enumeration of 
the ranks as a varies in F21. In Section 4, we obtain the desired four- valued cross correlation 
distribution. 

2. Preliminaries on Cross Correlation and Quadratic Forms 
Let F2"i be the finite field with 2™ elements and = \ {0}. For any integers m and 

m/n—l 

n with m \ n, the trace function from F2"i to F21 is defined by tr'^{x) = ^ , where x is 

i=0 

an element in F2™. 

Let m = 2n be an even integer, a be a primitive element of F2™. and T = 2"-|-l. Then P = 
is a primitive element of F21. The m-sequence {st} of period 2"* — 1 and the m-sequence {ut} 
of shorter period 2" — 1 are given by 

respectively. The cross correlation at shift < r < 2" — 2 between {st} and the d decimation of 
{ut} is defined by 

2'"-2 
i=0 

In this paper, we consider the cross correlation for the decimation d satisfying 

d(2' + 1) = 2*(mod2" - 1) (2.1) 

for some / and i for an arbitrary n. Note that in [7], only the case for odd n and gcd(/,n) = 1 
is considered. Obviously, if d satisfies Equality (12. ip . then both d and 2' -|- 1 are prime to 
2" — 1. In fact, for each d satisfying (j2.ip . one can choose some / < n such that both (|2.ip and 
gcd(2' -M, 2™ - 1) = 1 hold. To explain this, we need the following standard consequence of the 
division algorithm. 

Lemma 1. Let u and u be positive integers with w = gcd{u,v), then 

gcd(2" - 1,2^' - 1) = 2"' - 1 

and 

1, if u/w is odd, 



Assume that Equality (j2.ip holds. Write n = 1^n\ with odd n\. By Lemma [H 2^ divides 
and / can be written as I = 2'^li. If li is even, then by Lemma [1] again, gcd(2' -|- 1, 2"^ — 1) = 1. 
Otherwise, if h is odd, let I' = n - I. Then one has d{2^' + 1) = 2""'+* (mod 2" - 1) and 
gcd(2'' 1, 2™ - 1) = 1. 

This leads we use the following notation on integers: 

• n = kr and m = 2kr with an arbitrary integer k and odd r > 3. 
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• I = ks, where < s < r, s is even, and gcd(r, s) = 1. Note that gcd(2' + 1, 2"^ — 1) = 1 
by Lemma dJ 

• d is a decimation satisfying d[2^ + 1) = 2* (mod 2" — 1) for some i. 
Additionahy, we let 

• A^(/, F2") denote the number of roots in a finite field F2i" of a polynomial /. 
For any function f{x) from F2"i to F2, the trace transform /(A) of f{x) is defined by 

E 



/(A)= (_l)/W+trr{Ax)^ AGF2-n. 



f{x) is called to be a quadratic form, if it can be expressed as a degree two polynomial of the 
form f{xi,X2, ■ ■ ■ ,Xm) = o-ijXiXj by using a basis of F2"i over F2. The rank of the 

l<i<j<m 

symmetric matrix with zero diagonal entries and aij as the and (j, i) entries for i 7^ j, is 
defined as the rank of f{x). It can be calculated from the number N oi x & F2m such that 
Bf{x, z) := f{x -\- z) + f{x) + f{z) = holds for all z G F2"i, namely, rank(/) = m — log2(A^). 
The Bf{x,z) is called the symplectic form of f{x). It is known that the distribution of trace 
transform values of a quadratic form is determined by its rank as the following lemma. For more 
details, the reader is referred to [8]. 



Lemma 2 ([8]). The rank of any quadratic form is even. Let f{x) he a quadratic form on F2" 
with rank 2h, 1 < h < m/2. Then its trace transform values have the following distribution: 

±2™-'^, 22^^-1 ±2^-1 times, 
0, 2™ - 2"^^ times. 



/(A) 



Using the trace representation of the sequences, Cdir) can be written as 

2^-2 

t=0 

2)Ti 2 

_ ^_2-)tr™(a*)+tr7{/3'*^Q"^) 
t=0 

_ Y (^_X)tr5"(x)+tr'j*(ax''^) 

where a = (3'^'^ € F2". Now making a substitution x = y^'"^^, we have 

= E = -i + /r,(o), 

where 



(2.2) 



Pa{x) = trr(x2'+i) + tr^(arE2"+i). (2.3) 

The idea of the above work handling Cd{T) comes from Ness and Helleseth [12]. However, the 
observation that gcd(2' + 1, 2"^ — 1) = 1 and the substitution x = y'^ is one-to-one over F2»" 
enables us to simplify the calculation of Cdir), comparing with the work of |12j . 



3. Ranks of Quadratic Forms pa{x) and Their Enumeration 

In this section, we determine the ranks of the quadratic forms Paix) defined by Equality (j2.3l 
and the enumeration of the ranks when a ranges over F2n . 
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The symplectic form of Pa{x) is given by 

Bp^{x,z) = Pa{x) + Pa{z) + Pa{x + z) 

TTt / 9^ 9^ \ n / 9"" 9"" \ 

= tr™(zx + xz ) +iTi{azx + axz ) 
= tr?|"(z2;2' + zx^™"') + tr^(tC(azx2")) 

= iT'^{z'^^ (x^^* + a^'x^' + x)), 

where t = n + l. 

Therefore, we consider the number of roots in of the polynomial 

fa{x) := + + X, a G F*„. (3.1) 

Note that gcd(t, m) = /c, all these roots form an F2fe-vector space. Thus, the number of roots of 
fa{x) is a power of 2^ . 

Denote y = x'^ We have 

/.(x)=x(/+Va2'y + l). (3.2) 

The nonzero roots of /a(x) are closely related to that of the polynomial 

5a(y) a^' 2/ + 1, (3.3) 

or equivalently, to that of the roots of the polynomial 

hc{z) := + CZ + C, (3.4) 

which is obtained from Equation (j3.3|) by substituting y = a~'^' z, then dividing by a~^'(^*"'"^) 
and letting c = a^'^^*"*"^). Notice that there exists a one-to-one correspondence between a G 
and c G F^n since gcd(2* + 1,2"-!) = 1. 

The properties about the roots of a polynomial with the form as Equation (j3.4p were inves- 
tigated technically in and 0. To facilitate the introduction of their results, we still use the 
notation hc{x) defined by Equality (j3.4p in the following Lemmas [3l But notice that this lemma 
holds for any positive integers m and t, and c G ¥2^. 

Lemma 3 (Theorem 5.4 of [1]). Denote 

= {e G F2™ I = where r] G Fg™ and /ic(r?) = }, (3.5) 

where denotes the algebraic closure 0/F2™. Let k = gcd{t,m). Then hc{x) has either 0, 
1, 2 or 2'' + 1 roots in Y2-m. Moreover, if h{x) has exactly one root in ¥2^,, then H F2"i is 
nonempty, and tr^(^) 7^ for any ^ G n F2"i. 

Proposition 1. For any a G Fgn, Qaiv) has either 0, 2, or 2'^ + 1 nonzero roots in F2"i. 

Proof. Since ga{y) has the same number of roots as hc{z) for c = a^*^^'"*"^-*, it is sufficient to 
prove hc{z) has either 0, 2, or 2*^ + 1 nonzero roots in F2™ . 

By gcd(t, n) = k and LemmaEl hc{z) has either 0, 1, 2, or 2*"' + 1 nonzero roots in F2™. Thus, 
we only need to prove hc{z) can not have exactly one root in F2m. 

Assume that hc{z) has exactly one root in F2™., denoted by r]. Then ry^" also is a root of hc{z), 
which implies that rj = r]'^" and then rj G F2". Thus, hc{z) has exactly one root in F2'i too. By 
Lemma [3l the set H„ n F2n C Em n F2™ is nonempty, and for any G H.„ n F2'i C Em n F2>™, we 
have tr™(C) / 0, which contradicts with the fact tr^(^) = tr^(tr™(C))) = tr^(e • tr™(l)) = 0. 

□ 
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Proposition 2. Let a G F2n. Then 

(1) If Ui and 2/2 are two different roots of ga{y) in F2'", then yiy2 is a {2^ — l)-th power in 
F2™; and 

(2) If there exist at least three different roots of ga{y) in F2™, then each root of ga{y) in F2"i 
is {2^ — l)-th power in ¥2^- 

Proof. (1) If (7c(?/i) = for i = 1 and 2, then we have 

/ \9* 2^ + 1 2^-1-1 

yiy2{yi + y2) = Vi y2 + yiy2 

= {a^'yi + 1)2/2 + {a^'y2 + l)yi 

= yi + y2- 

Since gcd(2* - 1, 2™ - 1) = 2'^ - 1, so 

2/12/2 = (2/1 +2/2)"^^*"^^ 

is a (2^^ — l)-th power in F2™. 

(2) Let 2/1)2/2 and 2/3 be three different roots of ga{y) in F2™. Then by (1), ah of 2/12/2,2/12/3 
and 2/22/3 are (2'^ - l)-th power in F2"i, and hence so are 2/1 = (2/12/2) (2/1 2/3)/ (2/2 2/3) and 2/1- This 
finishes the proof. □ 

Proposition 3. Let a G Fgn. Then fa{x) has exactly either 1 or 2"^^ roots inF2m, that is, Pa{x) 
has rank of m or m — 2k. Furthermore, 

Nifa,F2^) = 1 ^ N{ga,F2^) = or 2 

and 

iV(/a,F2-) = 22^= ^ iV(2/„F2-) = 2^= + 1. 

Proof. This is shown by analyzing the number of roots in F2™ of ga{y)- Note that y = x^^~^ 
and gcd(2™ — 1, 2* — 1) = 2*^ — 1. Thus, the correspondence from x G Fg™. to y is (2'^ — l)-to 1. 

If ga{y) has exactly 2^ + 1 roots 2/ in F2™, then by Proposition [2]|^2), all its roots in F2™ are 
(2^^ — l)-th power in F2"i, and they correspond (2'^ + 1)(2''" — 1) = 2^*^ — 1 nonzero roots of fa{x) 
under the inverse of the mapping x ^-^ y = x'^ . Thus fa{x) has exactly 2^^ roots in F2'". 

If ga{y) has exactly 2 roots 2/1)2/2 € F2™, then by Proposition [2)^1), 2/1)2/2 are either both 
{2^ — l)-th powers in F2™ or both not (2'^ — l)-th power in F2™. The former can not be true. 
If it is that case, then 2/1 and 2/2 would correspond total 2(2'"' — 1) = 2^^^ — 2 nonzero roots of 
fa{x), and thus fa{x) would have exactly 2'^+^ — 1 roots in F2"i. This is a contradiction with 
that the number of roots is a power of 2'^. Therefore, both two roots are not (2'= - l)-th powers 
in F2'" and faix) has no nonzero root in F2™. □ 

In the sequel, we determine how many a G F2n there are such that fa{x) has exactly 1 or 2"^^ 
roots in F2"i. Note that we encounter here two different fields ¥2^ and F2'". To this end, we 
first have 

Proposition 4. N{ga,F2^) = N{ga,F2"){mod2). 

Proof. Since gaiy) is a polynomial over F21, we know that for any root 7 G F2m of gaiy), its 
2^-th power 7^" is also a root of ga{y) in F2"i. If this root 7 ^ F2", then 7 7^ 7^", and these two 
elements form a pair {7, 7^ } as roots of gaiy) in F2"i , By (7'^ )^ = 7, every two pairs of roots of 
this form are either just the same one or disjointed. Thus, N [ga, F2^n) = N{ga,F2n){Toaod 2). □ 

To determine N{fa,F2"), we need the following lemma. Notice that in this lemma, integers 
n and t refer to any positive integers, and c refers to any element in F2'i. 
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Lemma 4 (Theorem 5.6 of [T]). Let k = gcd(t, n) and q = 2^, then hc{x) has either 0, 1, 2 or 
q+l roots in F2'i. Moreover, let Ni denote the number of c G Fgn such that hc{x) has exactly i 
roots in F2", where i = 0, 1, 2, g + 1. If ^ = n/k is odd, then 

^VO - 2(g+l) ' - ^ - - 2(g-l) ' " <?^-l ' 

Proposition 5. For any a G Fgn, t/ie ranA; 0/ Pa{x) is m or m — 2k. Furthermore, let 
(Rm-2k, respectively) he the number of a ^ Fgn such that rank(/a) = m (^rank(/a) = m — 2k, 
respectively), then 

2n+2k 2^~'rk 2"' -|- 1 2"+^^ 2^^^ 

Rm = 22fc _ 1 ' '^'»-2fc = 22fc - 1 ■ 

Proof. By Propositions [H [3] and HI we have 

7V(/a,F2-) = 1 ^ A^(5a,F2™) = or 2 ^ iV(5a,F2") = or 2 (3.6) 

and 

N{fa,F2n.) = 2"^ ^ iV(5a,F2-) = 2^' + 1 ^ iV(5a,F2n) = 1 or 2'^ + 1. (3.7) 

Since gcd(t, n) = k and ^^^"^ = r is odd, by Lemma HI the number of roots of hc{z) is equal 

to either 0, 1, 2 or 2^" + 1. For i = 0, 1, 2 and 2^ + 1, let Ni denotes the number of c e such 
that hc{z) has exactly i roots in F2". Then 

2fc('-+i)+2'° AT _ 9fc(r-l) 1 /V _ (2''-2)(2fe'--l) _ 2fc('-i)-l 

^0 - 2(2fe+l) ' ^1 - 2 ^ ^ - 1, 7V2 - 2(2^3Y) ' ^2^+1 - 2^fe-l • 

Since 5a (y) has the same number of roots as hc{z) for c = a^'^^*"*"^) G Fgn, and the correspondence 
from c G Fgn to a G Fgn is bijective by gcd(2* + 1,2" — 1)) = 1, so there are Ni elements a G Fg^ 
such ga{y) has exactly i roots in F2", which implies that there are A'^o + A'^2 elements a G Fgn 
such that fa{x) has exactly one root in F2™ by Equality (|3.6p . Then we have 

P - AT ^AT - 2fc('-+i)+2fc , (2fc-2)(2'="-l) _ 2"+^^ -2"+^ ~2"+l 
-n-m — ^Vo -t- iV2 — 2(2*+!) 2(2'=-!) ~ 22^-1 ' 

and 



Rm-2k — Ni+ N2k^i 



4. Distribution of the Cross Correlation Cd(r) 



□ 



Lemma 5 ([E])- Let m = 2n, then for any decimation d with gcd(d, 2" — 1) = 1, the cross 
correlation value Cd{T) satisfies the following relations: 

2"— 2 

(1) E C,{t) = 1; 

T=0 

2"— 2 

(2) E (Cdir) + 1)2 = 2^(2" - 1); 

T=0 

2" -2 

(3) Yl (C'd(T) + 1)^ = —22™ + (i/ + 3)2"+"^, where v is the number of solutions {xi,X2) G 

T = 

(F2m , F2m ) of the equations 

+ X2 + 1 = 0, 
d(2"+l) , d(2"+l) , . „ 



Proposition 6. Let d be defined by Equality \2.1\) . Then there are 2^ — 2 solutions {xi,X2) S 
(F2m,F2m) of the system of equations 

Xi + X2 + 1 = 0, 
^1 +2^2 + 1 = 0. 

Proo/. Suppose that xi,X2 € Fgm and let xi = yf X2 = yf^^- Since gcd(2"' - 1, 2' + 1) = 
1, so there exists a one-to-one correspondence between (xi,X2) S (F2m,F2m) and (yi,y2) S 
(F2m , Fjm ) . Then Equation (|4.ip equivalently becomes 

/ 2/^^+2/2^'+^ + 1 = 0, 

I ^d(2'+l)(2"+l) _^ ^d{2'+l)(2"+l) ^ ;^ ^ 0. 

Since d{2^ + l) = 2' (mod 2" - 1), we have 

^d{2'+l){2"+l) ^ ^d(2'+l)(2"+l) ^ ^ ^ ^2^2"+!) ^ ^2»(2"+l) ^ ^ ^ ^^2"+l ^ ^2"+! ^ i)2' ^ 



Thus, the above system of equations becomes 

/ yf^' + vt^' + 1 = 0, 
1 yr^+2/2'"+^ + i = o, 

which implies 

^(2n+i)(2<+l) ^ ^^2-+l ^ i)2"+l ^ y(2"+l)(2'+l) ^ y(2'+l)2" ^ ^2'+l ^ ^ 



(4.2) 



and 



Then we have 



= (^2 +y2)(?/2 +y2) 

= 0. 

So, 7/2 belongs to F271+1 C\F2"t. = or F2n-in^2™ = F2fe. In either case, we always have 
y2 G F2fc. Similarly, we have yi G F2fc. Then, Equation (|4.2p becomes 

yf + y2 + 1 = 0, (4.3) 

or equivalently, 

yi + ?/2 + 1 = (4.4) 

with yi,y2 G F*fe, which has exactly 2'^ — 2 solutions. Therefore, Equation (14. Ih has 2*^ — 2 
solutions (xi,X2) G (F2m,F2m). This finishes the proof. □ 

Theorem 1. The cross- correlation function Cdir) has the following distribution: 

— 1, occurs 2""'^ — 1 times, 

— 1 + 2", occurs 2''+! — times, 

1 on (2"-l)(2''-i-l) ,. 

— 1 — 2, occurs -^^ times, 

— 1 — 2 ^ , occurs 22fc^i times. 
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Proof. By Equality (j2.2p . we have 

Cd(r) + 1 = pa{0). 

From Proposition \5\ the rank of pa is m or m — 2k. By this together with Lemma [21 one 
can conclude that p^(0) takes values from {0, ±2" , ±2""'"'^}, and Cd(r) possibly takes values —1, 
-1±2'^, -1±2'^+*^. 

Suppose that Cd(r) takes values -1,-1 + 2", -1-2", -1 + 2"+*^ and -1 - 2"+'= exactly Mi, 
M2, M3, M4 and M5 times, respectively. Obviously, 

Ml + M2 + M3 + M4 + M5 = 2" - 1. (4.5) 

Since p^(0) takes values ±2" if and only if the rank of Pa{x) is m, by Proposition [5l we have 

2ii+2fc 2'"+'^ 2" + 1 

M2 + M3 = i?™ = . (4.6) 

By Lemma [5] and Proposition [6l we have 

-Ml + (-1 + 2")M2 + (-1 - 2")M3 + (-1 + 2"+*^)M4 + (-1 - 2"+'^)M5 = 1, 
22"M2 + 22" M3 + 22("+'=)M4 + 22("+'^)M5 = 2"^(2" - 1), (4.7) 
23" M2 - 23"M3 + 23("+'=)M4 - 23("+^)M5 = -2^™ + (2*^ - 2 + 3)2"+"". 

The above Equations (fi3]) . ([O]) and ([iTT]) give 

Mi = 2"-^-l, M, = ^2^1^^ M3 = (^"-^jg;^"^ M4 = 0, M5 = ^. 

□ 

Remark 1. /t is easy to check that Mi, M2 and are always nonzero and M3 = if and only 
if k = 1. Thus, when gcd(/,n) = 1, the cross correlation Cd{T) takes exactly three values, and 
when gcd(/,n) > 1, the cross correlation takes exactly four values. 

Remark 2. By a complete computer experiments for up to m = 26, Helleseth et al listed all 
decimation d such that Cdir) having at most a six-valued cross- correlation function in |12j . Their 
theoretical proofs in |12l [T3l [7] completely explained all decimation d listed in [12] and giving a 
three-valued cross correlation, and they conjectured that the d satisfying d{2^ + \) = 2*(mod2" — 1) 
and gcd(Z,n) = 1 are all decimations that give three-valued cross correlation. 

For the case of four-valued cross correlation, only partial classes of decimations d are shown 
to have this property [B] . The above theorem 1 can explain all decimation d listed in [T2] and 
giving exactly a four-valued cross correlation, except an exceptional d = 7 for a small m = 8 
case. 

The extensive numerical experiments of Helleseth et al (up to m = 26 in jT2]j may suggest 
one to conjecture, as Helleseth et al do in m, that the converse of Theorem 1 holds true, that 
is, for m > 12, if Cci{t) has at most a four-valued cross correlation, then there must exist some 
I and i such that d{2^ + 1) = 2*(mod2" — 1). // this conjecture can be shown true, then the 
conjecture in [7] is also true. This will be an interesting open problem. 

Remark 3. When m is a power of 2, there are no d and I satisfying d{2^ + 1) = 2* (mod 2" - 1) 
by Lemma 1. This together with the conjecture mentioned above (if true) explains why there is 
no d giving at most a four-valued cross correlation for m = 16. 

5. Conclusion 

We have studied the cross correlation between an m-sequence of period 2™ — 1 and the d- 
decimation of an m-sequence of period 2" — 1 for even m = 2n. We prove that if d satisfies 
d{2^ + 1) = 2^ (mod 2" - 1) for some / and i, then the cross correlation takes exactly either three 
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or four values, depending on gcd(Z,n) is equal to or larger than 1. The result enriches the work 
of Helleseth et al. An interesting open problem is left. 
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